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Brief Summary of Selected Substantive Portions of this Response 

[0001] In a telephone discussion (on Feb 20, 2007), the difference 
between a digital signature associated with an ActiveX™ control and a 
digital signature associated with a web page were discussed. A digital 
signature associated with a control object may be used to verify the 
authenticity of the control object, but does not prevent a second web page 
from maliciously accessing the control object that was previously 
downloaded to a client device by a first web page. By associating a digital 
signature with a web page that includes code to invoke a control object, a 
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client device can then verify the authenticity of the web page before allowing 
the web page to invoke the control object. While the control object Itself 
may be digitally signed, the signature associated with the control object does 
not provide a way to verlf/ the authenticity of the web page invoking the 
control object. Examiner Chen agreed that the cited art does not appear to 
describe associating a digital signature with a web page that includes code 
to Invoke a control object, but that does not include the control object. 
We also discussed the possibility that the cited art may not describe 
signing a web page in response to receiving a request for the web page. 
In order to expedite prosecution, the claims are being amended based on 
these differences. 
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